DedSec

DedSec Project Official Website DedSec Project Cross-platform build note: This copy includes support for Ubuntu, Kali Linux, Linux Mint, and Termux. Run bash Setup.sh, then use ./Run.sh. See CROSSPLATFORM.md for platform-specific behavior and limitations. Για να μεταβείτε στην πλήρη Ελληνική...

Jboss_JMXInvokerServlet_Deserialization_RCE

JbossJMXInvokerServletDeserializationRCE Using Burp Suite to Exploit Java Deserialization Vulnerabilities 0x01 Setting Up the Jboss JMXInvokerServlet Deserialization Vulnerability Test Environment: Jboss JMXInvokerServlet Deserialization Vulnerability Vulnerability Principle: JBoss reads the...

Powershell-C2

Powershell-C2 This attack stems off of my Powershell Payload Excel Delivery, but it uses a really cool method for Command and Control/persistence on the box. A walk-through can be found here: http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/...

sslscan

sslscan2 sslscan versión 2 ya ha sido lanzada. Esto incluye una reescritura importante del código de escaneo del backend, lo que significa que ya no depende de la versión de OpenSSL para muchas comprobaciones. Esto significa que es posible soportar protocolos heredados SSLv2 y SSLv3, así como...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

HikPasswordHelper

HikPasswordHelper A tool which exploits a backdoor in Hikvision camera firmwares circa 2014-2016 ICSA-17-124-01 to help the owner change a forgotten password. Usage Download HikvisionPasswordResetHelper.exe from the releases tab and run the exe. There are 5 simple steps to reset a password, and y...

msldap

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord msldap LDAP library for MS AD 🚩 Runs in the browser This project, alongside with many...

msldap

🚩 Patrocinadores Si te gusta este proyecto, considera comprar licencias de OctoPwn, ¡nuestro conjunto completo de pruebas de penetración que se ejecuta en tu navegador! Para notificaciones sobre nuevas compilaciones/lanzamientos y otra información, únete a nuestro Discord msldap Librería LDAP par...

trivy-db

trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc. CLI The trivy-db CLI tool builds vulnerability DBs. A GitHub Actions workflow...

pwndrop

pwndrop es un servicio de alojamiento de archivos autodesplegable para enviar cargas útiles de red team o compartir de forma segura tus archivos privados a través de HTTP y WebDAV. Si alguna vez has necesitado configurar rápidamente un servidor web nginx/apache para alojar tus archivos y nunca...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

CVE-2024-4577

🚀 CVE-2024-4577: Escáner y Exploit de Inyección de Argumentos en PHP CGI 🛡️ Descripción general CVE-2024-4577 es una vulnerabilidad crítica que afecta a aplicaciones PHP que utilizan la Interfaz de Puerta de Enlace Común CGI. Esta herramienta sirve tanto como escáner como exploit , permitiendo a...

BerrySentinel

🫐 Berry Sentinel Detector conductual de conexiones C2 Command & Control en tiempo real Zero-signature · Bulletproof Collection · Deep Scan · Kill Engine ¿Qué es? Berry Sentinel monitorea todas las conexiones de red activas en tu sistema y analiza el comportamiento de los procesos que las generan...

AndroSH

AndroSH - Run Linux Distributions on Android No Root, ADB/Shizuku Powered Run and manage full Linux distributions on your Android device - no root required. Table of Contents Quick Start Features Supported Distributions Overview Screenshots Architecture Installation Updating Usage Use Cases...

gitGraber

Acerca de gitGraber gitGraber es una herramienta desarrollada en Python3 para monitorizar GitHub con el fin de buscar y encontrar datos sensibles en tiempo real para diferentes servicios online como: Google, Amazon AWS, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe, Twilio... ¿Cómo...

Guardrails

NVIDIA NeMo Guardrails Library LATEST RELEASE / DEVELOPMENT VERSION : The develop branch tracks the latest top of tree development. The latest released version is 0.24.1. ✨✨✨ 📌 The official NeMo Guardrails library documentation is available atdocs.nvidia.com/nemo/guardrails. ✨✨✨ NVIDIA NeMo...

AddUser-SAMR

AddUser-SAMR Create local administrators using the SAMR API, operating at a lower level than net.exe, PowerShell's New-LocalUser or NetUserAdd API. It requires Administrator privileges and if the user exists, it gets added to the group but the password is not updated. There are 4 implementations ...

CVE-2025-60787

CVE-2025-60787 - Authenticated RCE in motionEye PoC for CVE-2025-60787 that is an Authenticated RCE vulnerability for motionEye with all afected versions up to 0.43.1b4 included. This is an automated PoC for the vulnerability described in this repository. Credits to prabhatverma47. Usage The scri...

kerneleye

KernelEye Kernel-level traffic intelligence and threat remediation for Linux servers. KernelEye is a self-hosted security monitoring platform for Linux servers. It uses eBPF, TC, and XDP in a Go agent to observe network metadata, score suspicious activity, and apply remediation through kernel-lev...

Ledger

Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...